sergio
8592bab19e
- crates/core/README.md: agrupamiento lógico de los 31 crates absorbidos
de arje (ente-*) y del protocolo brahman (brahman-*) en 6 grupos —
Init/PID 1, contratos, discovery, IPC+CAS, cerebro, 14 shims compat
systemd. No se movieron crates físicamente (rompería paths
cross-workspace).
- seeds/arje-minimal.card.json: PID1 + /bin/sh, smoke test QEMU.
- seeds/arje-prod.card.json: PID1 + 14 shims compat + tmpfiles/binfmt
one-shots + echo + getty (16 children). Validados con
brahman_card::Card::validate.
- seeds/validate.sh: carga la seed vía ente-zero en dev mode.
- scripts/build-arje-initrd.sh: empaqueta CPIO+gzip newc layout
/init→/sbin/ente-zero, /usr/sbin/ente-*-compat, /ente/seed.card.json,
/bin/{sh,...} (busybox o glibc+ldd). Tested: produce 20 MB initrd OK.
- scripts/run-arje-qemu.sh: qemu-system-x86_64 con KVM auto-detect,
-kernel/-initrd/-append "rdinit=/init console=ttyS0,115200 panic=10".
- docs/arje-boot.md: doc end-to-end — layout initramfs, QEMU (con kernel
del host o externo), GRUB bare metal, Proxmox/libvirt args:, schema
de Card con todas las validaciones, debugging (sockets de
introspección, snapshot/restore, metrics), checklist pre-deploy.
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
297 lines
15 KiB
JSON
297 lines
15 KiB
JSON
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0M0",
|
|
"lineage": null,
|
|
"label": "arje.seed.prod",
|
|
"provides": ["Spawn", "Journal"],
|
|
"requires": [],
|
|
"permissions": {
|
|
"networking": "loopback",
|
|
"filesystem": "read-write",
|
|
"ipc": { "allow": ["wit-v1"] },
|
|
"processes": true
|
|
},
|
|
"soma": {
|
|
"namespaces": {
|
|
"mount": false, "pid": false, "net": false,
|
|
"uts": false, "ipc": false, "user": false, "cgroup": false
|
|
},
|
|
"rlimits": { "mem_bytes": null, "nproc": null, "nofile": null },
|
|
"cgroup": { "path": "ente.slice/zero", "cpu_weight": null, "io_weight": null },
|
|
"cpu_affinity": null
|
|
},
|
|
"payload": "Virtual",
|
|
"supervision": "OneShot",
|
|
"lifecycle": "daemon",
|
|
"priority": "critical",
|
|
"flow": { "input": [], "output": [] },
|
|
"genesis": [
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0M1",
|
|
"lineage": null,
|
|
"label": "tmpfiles-boot",
|
|
"provides": [],
|
|
"requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-tmpfiles-compat", "argv": ["--boot"], "envp": [] } },
|
|
"supervision": "OneShot",
|
|
"lifecycle": "oneshot",
|
|
"priority": "critical",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0M2",
|
|
"lineage": null,
|
|
"label": "binfmt-boot",
|
|
"provides": [],
|
|
"requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-binfmt-compat", "argv": [], "envp": [] } },
|
|
"supervision": "OneShot",
|
|
"lifecycle": "oneshot",
|
|
"priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0H0",
|
|
"lineage": null,
|
|
"label": "compat-hostnamed",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-hostnamed-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0T0",
|
|
"lineage": null,
|
|
"label": "compat-timedated",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-timedated-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0X0",
|
|
"lineage": null,
|
|
"label": "compat-localed",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-localed-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0J0",
|
|
"lineage": null,
|
|
"label": "compat-journald",
|
|
"provides": ["Journal"], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-journald-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0R0",
|
|
"lineage": null,
|
|
"label": "compat-resolved",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "outbound", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-resolved-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0P0",
|
|
"lineage": null,
|
|
"label": "compat-polkit",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-polkit-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0Q0",
|
|
"lineage": null,
|
|
"label": "policy-provider",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-only", "ipc": { "allow": ["wit-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-policy-provider", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0M0",
|
|
"lineage": null,
|
|
"label": "compat-machined",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-only", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-machined-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0S0",
|
|
"lineage": null,
|
|
"label": "compat-systemd1",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-systemd1-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0N0",
|
|
"lineage": null,
|
|
"label": "compat-notify",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-notify-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "normal",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0Y0",
|
|
"lineage": null,
|
|
"label": "compat-logind",
|
|
"provides": ["LegacyLogind"], "requires": [],
|
|
"permissions": { "networking": "loopback", "filesystem": "read-write", "ipc": { "allow": ["dbus-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-logind-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0Z0",
|
|
"lineage": null,
|
|
"label": "compat-timer",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/compat","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-timer-compat", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 1000, "max": 60000 } },
|
|
"lifecycle": "daemon", "priority": "low",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0E0",
|
|
"lineage": null,
|
|
"label": "echo-smoke",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-only", "ipc": { "allow": ["wit-v1"] }, "processes": false },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/test","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": { "Native": { "exec": "/usr/sbin/ente-echo", "argv": [], "envp": [] } },
|
|
"supervision": { "Restart": { "initial": 200, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "low",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
},
|
|
{
|
|
"schema_version": 1,
|
|
"id": "01J8YVKZQ0M0M0M0M0M0M0M0G0",
|
|
"lineage": null,
|
|
"label": "getty-tty1",
|
|
"provides": [], "requires": [],
|
|
"permissions": { "networking": "none", "filesystem": "read-write", "ipc": { "allow": [] }, "processes": true },
|
|
"soma": { "namespaces": {"mount":false,"pid":false,"net":false,"uts":false,"ipc":false,"user":false,"cgroup":false},
|
|
"rlimits": {"mem_bytes":null,"nproc":null,"nofile":null},
|
|
"cgroup": {"path":"ente.slice/getty","cpu_weight":null,"io_weight":null},
|
|
"cpu_affinity": null },
|
|
"payload": {
|
|
"Native": {
|
|
"exec": "/bin/sh",
|
|
"argv": ["-i"],
|
|
"envp": [["PATH", "/usr/sbin:/usr/bin:/sbin:/bin"], ["TERM", "linux"], ["PS1", "arje# "]]
|
|
}
|
|
},
|
|
"supervision": { "Restart": { "initial": 100, "max": 30000 } },
|
|
"lifecycle": "daemon", "priority": "high",
|
|
"flow": { "input": [], "output": [] }, "genesis": []
|
|
}
|
|
]
|
|
}
|